General
-
Target
e8cbc695da0a4e41d0a99ac2a65351e0c89848ec5a7eaa66203e2ba44928b4f3
-
Size
98KB
-
Sample
221018-kd6srsfbb2
-
MD5
61904881703150762d61354d40bc6d03
-
SHA1
8c05ffcb409a54ec20994e681cb426e2b676cfe5
-
SHA256
e8cbc695da0a4e41d0a99ac2a65351e0c89848ec5a7eaa66203e2ba44928b4f3
-
SHA512
2b7dca253883b8dca8ae86d80ee7a2b67ba5a4e5b121aa5e684cc914d43cb85b7cda05d975bc7a6ef1cce52aad0c09417b22c442fe91a75de0868b37b15c5e3e
-
SSDEEP
1536:XQFl29mEkE0L1rDEKrxZKF2zf9g2Pl7W/MwbxMX+ees52z30rtrBuxzuA:429DkEGRQixVSjLaes5G30B6r
Behavioral task
behavioral1
Sample
e8cbc695da0a4e41d0a99ac2a65351e0c89848ec5a7eaa66203e2ba44928b4f3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e8cbc695da0a4e41d0a99ac2a65351e0c89848ec5a7eaa66203e2ba44928b4f3.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
e8cbc695da0a4e41d0a99ac2a65351e0c89848ec5a7eaa66203e2ba44928b4f3
-
Size
98KB
-
MD5
61904881703150762d61354d40bc6d03
-
SHA1
8c05ffcb409a54ec20994e681cb426e2b676cfe5
-
SHA256
e8cbc695da0a4e41d0a99ac2a65351e0c89848ec5a7eaa66203e2ba44928b4f3
-
SHA512
2b7dca253883b8dca8ae86d80ee7a2b67ba5a4e5b121aa5e684cc914d43cb85b7cda05d975bc7a6ef1cce52aad0c09417b22c442fe91a75de0868b37b15c5e3e
-
SSDEEP
1536:XQFl29mEkE0L1rDEKrxZKF2zf9g2Pl7W/MwbxMX+ees52z30rtrBuxzuA:429DkEGRQixVSjLaes5G30B6r
Score10/10-
Sakula payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-